CVE-2014-0333

Published: Feb 27, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.

Affected (18)

Products: Libpng: Libpng

Libpng

1 product

Libpng

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Libpng Libpng	Version 1.6.0
Libpng Libpng	Version 1.6.0 beta
Libpng Libpng	Version 1.6.1
Libpng Libpng	Version 1.6.1 beta
Libpng Libpng	Version 1.6.2
Libpng Libpng	Version 1.6.2 beta
Libpng Libpng	Version 1.6.3
Libpng Libpng	Version 1.6.3 beta
Libpng Libpng	Version 1.6.4
Libpng Libpng	Version 1.6.4 beta
Libpng Libpng	Version 1.6.5
Libpng Libpng	Version 1.6.6
Libpng Libpng	Version 1.6.7
Libpng Libpng	Version 1.6.7 beta
Libpng Libpng	Version 1.6.8
Libpng Libpng	Version 1.6.8 beta
Libpng Libpng	Version 1.6.9
Libpng Libpng	Version 1.6.9 beta